In this challange first i performed Nmap scan on given ip address for checking how many ports are opened and which services were running on port.
Only two ports are open and services running on that which was http and ssh after that I opened ip address in browser and it showed wordpress directory but it was not accessible.
I used wpscan on the host and It showed website was not running on WordPress.
Then after i used dirb on host for check any of files or directory publically accessible or not.
After that i got a directory which contain folders. here you can see.
In this folder too many files and one file which was contain flag that was FLAG_Use_Me_Wisely.txt
I opened file and got first flag with hint.
It was a stegenogaphy challange so first i downloaded an image.
Image was showed like that.
I used Steganographic Decoder for decode image and obtain the hidden information from image after that i uploaded image & entered flag as a password according to hint.
And i got second flag.